<!doctype html>
<html>
<script src="http://localhost:8080/security/resources/cors-script.php?max-age=60" crossorigin
        onload="parent.postMessage('FAIL', '*')"
        onerror="parent.postMessage('PASS', '*')"></script>
